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ABSTRACT 

We consider a generalization of the dining philosophers prob- 
lem to arbitrary connection topologies. We focus on sym- 
metric, fully distributed systems, and we address the prob- 
lem of guaranteeing progress and lockout-freedom, even in 
presence of adversary schedulers, by using randomized algo- 
rithms. We show that the well-known algorithms of Lehmann 
and Rabin do not work in the generalized case, and we pro- 
pose an alternative algorithm based on the idea of letting 
the philosophers assign a random priority to their adjacent 
forks. 

Categories and Subject Descriptors 

D.4.1 [Software]: Operating Systems — Process Management; 
C.2.4 [Computer Systems Organization]; Computer- 
Communication Networks — Distributed Systems 

1. INTRODUCTION 

The problem of the dining philosophers, proposed by Dijk- 
stra in [|^], is a very popular example of control problem in 
distributed systems, and has become a typical benchmark 
for testing the expressiveness of concurrent languages and 
of resource allocation strategies. 

The typical dining philosophers sit at a round table in posi- 
tions alternated with forks, so that there is a fork between 
each two philosophers, and a philosopher between each two 
forks. Each philosopher can pick up only the forks immedi- 
ately to his right and to his left, one at the time, and needs 
both of them to eat. The aim is to make sure that if there are 
hungry philosophers then some of them will eventually eat 
(progress), or, more ambitiously, that every hungry philoso- 
pher will eventually eat (lockout-freedom). 

The solutions to the problem of the dining philosophers de- 
pend fundamentally on the assumptions made on the sys- 
tem. If we do not impose an initial symmetry, or do not 
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impose that the system be completely distributed, then sev- 
eral solutions are possible. Some examples are: 

• The forks are ordered and each philosopher tries to get 
first the adjacent fork which is higher in the ordering. 

• The philosophers are colored yellow and blue alter- 
nateadly. The yellow philosophers try to get first the 
fork to their left. The blue ones try to get first the 
fork to their right. 

• There is a central monitor which controls the assign- 
ment of the forks to the philosophers. 

• There is a box with n — 1 tickets, where n is the number 
of the philosophers, and each philosopher must get a 
ticket before trying to get the forks. 

In the first two solutions above, the system is not symmetric. 
In the last two, it is not fully distributed. 

Of course, the problem becomes much more challenging when 
we impose the conditions of symmetry and full distribution. 
More precisely, symmetry means that the philosophers are 
indistinguishable, as well as the forks. The philosophers run 
the same program, and both the forks and the philosophers 
are all in the same initial state. Full distribution means that 
there are no other processes except the philosophers, there is 
no central memory, all philosophers run independently, and 
the only possible interaction is via a shared fork. 

The conditions of symmetry and full distribution are inter- 
esting also for practical considerations: in several cases it is 
desirable to consider systems which are made of copies of 
the same components, and have no central control or shared 
memory. In particular, symmetry offers advantages at the 
level of reasoning about the system, as it allows a greater 
modularity, and at the level of implementation of concurrent 
languages, as it allows a compositional compilation. Full dis- 
tribution is usually convenient as it avoids the overhead of 
a centralized control. 

Lehmann and Rabin have shown in the remarkable re- 
sult that there are no deterministic solutions to the dining 
philosophers problem, if symmetry and full distributions are 
imposed, and if no assumption (except fairness) are made 
on the scheduler. The only possible solution, in such con- 
ditions, are randomized algorithms, that allow to eventually 



break the initial symmetry with probability 1. In |9| two 
such algorithms are proposed, the first guarantees progress, 
the second guarantees also lockout-freedom. 

There are two proofs of correctness of the Lehmann and Ra- 
bin algorithms, one in and another one, more structured 
and formal, in ^j. They both depend in an essential 
way on the topology. In particular, they depend on the fact 
that one fork can only be shared by two philosophers (cfr. 
Lemma 1 in [^], Lemma 7.13 in [^, and Lemma 6.3.14 in 
|ic|]). Therefore, a question naturally arises: Would the so- 
lutions of Lehmann and Rabin still work in the case of more 
general connection structures? The problem is also of practi- 
cal relevance, since the kind of resource network represented 
by the classic formulation is very restricted. In this paper we 
investigate this question and show that the answer is no: In 
most situations, both the algorithms of Lehmann and Rabin 
fail. We then propose another solution, still randomized but 
based on a rather different idea: we let each philosopher try 
to establish a partial order on forks, by assigning a random 
number to his adjacent forks. In other words, we use ran- 
domization for breaking the initial symmetry and achieving 
a situation in which the forks are partially ordered. Finally, 
we propose a variant of the algorithm which ensures that no 
philosopher will starve (lockout-freedom). The algorithms 
are robust wrt every fair scheduler. 

Our motivation for this work comes from the project of pro- 
viding a distributed implementation for the vr-calculus 
So far, only the so-called asynchronous subset has been im- 
plemented pj. In 0, the second author has shown that 
the full TT-calculus is strictly more expressive than its asyn- 
chronous subset, and, more in general, that there is no hope 
of implementing the vr-calculus with deterministic methods. 
In Q Nestmann has shown that the gap in expressive power, 
and the difficulty in the implementation with deterministic 
methods, is due to the mixed (input and output) guarded 
choice construct of the 7r-calculus. Such mechanism, how- 
ever, would be very desirable as it provides a powerful pro- 
gramming primitive for solving distributed conflicts. Thus, 
we are considering a randomized implementation. We have 
developed an asynchronous probabilistic 7r-calculus [iTpa; Q), 
and we are currently investigating a translation from tt to 
TTpa that requires solving a resource allocation problem sim- 
ilar to the one of the generalized dining philosophers (the 
resources corresponds the channels of the 7r-calculus) . The 
restriction to symmetric solutions comes from the desire of 
providing a compositional translation. To our knowledge, 
there has been only a previous proposal for a symmetric and 
fully distributed implementation of a concurrent language 
with guarded choice (^), but such proposal works only un- 
der the assumption of "good" schedulers, i.e. a scheduler 
which behaves uniformly through the computation regard- 
less of the actions performed by the processes. 

2. THE GENERALIZED DINING PHILOSO- 
PHERS PROBLEM 

In this section we introduce a generalization of the dining 
philosophers problem. The generalization consists in relax- 
ing the assumptions about the topology of the system. In 
the classic problem the philosophers and the forks are dis- 
tributed along a ring (table) in alternated position. On the 
contrary, we consider arbitrary connection topologies, and 



in particular we admit the possibility that a fork is shared 
by more than two philosophers. Thus the number of forks 
and the number of philosophers is not necessarily the same. 
The only constraint we impose on the topology is that each 
philosopher is connected (has access) to two distinct forks. 
For the rest, the new formulation coincides with the classic 
one. 



Definition 1. A generalized dining philosopher system 
consists of n > 1 philosophers and k > 2 forks. Unlike the 
classic case, n and k may be different numbers, and a fork 
can be shared by an arbitrary (positive) number of philoso- 
phers. Like in the classic case, every philosopher has access 
to two forks, which he will refer to as left and right. Every 
philosopher can think or eat. When a philosopher wants to 
eat, he must pick up the two forks. He can pick up only one 
fork at the time. He cannot pick up a fork if his neighbor is 
already holding it. He cannot eat forever. After eating the 
philosopher releases the two forks and resumes thinking. 

Figure |l| shows some examples of generalized dining philoso- 
pher systems. Here and in the rest of the paper, we repre- 
sent a system as an undirected graph where the nodes are 
the forks (represented by sticks in Figure and the arcs are 
the philosophers (represented by circles in Figure 0). Obvi- 
ously, the forks accessible to a philosopher are the adjacent 
nodes. Note that we adopt the more general definition of 
graph, which allows the presence of more than one arc be- 
tween two nodes (some textbooks use the term multigraph) . 

The goal is the same as in the classic problem: to program 
the philosophers so that hungry philosophers will eventually 
eat. Following the standard terminology, we will say that 
a solution ensures progress (wrt a set of philosophers) if it 
guarantees that, whenever a philosopher of the set is hungry, 
then a philosopher of the same set (not necessarily the same 
philosopher) will eventually eat|^. A solution is lockout-free 
(wrt a set of philosophers) if it guarantees that, whenever a 
philosopher of the set is hungry, then the same philosopher 
will eventually eat. 

We shall consider only fully distributed and symmetric solu- 
tions, namely algorithms where the only processes are the 
philosophers, the only shared variables are the forks, all 
philosophers run identical programs and both the philoso- 
phers and the forks are in the same initial state. We as- 
sume that test-and-set operations on the forks are performed 
atomically. 

A computation consists in an interleaving of actions per- 
formed by the philosophers. Such interleaving is controlled 
by an adversary (or scheduler) . We assume that the adver- 
sary has complete information of the past of the computa- 
tion, and can decide its next step on the basis of that in- 
formation. We consider only /air adversaries, namely adver- 
saries that ensure that each philosopher executes infinitely 
many actions in each of the possible computations. 

We will consider randomized algorithms, namely algorithms 
which allow a philosopher to select randomly between two 

^In H this property is called deadlock-freedom. 



Figure 1: Some examples of generalized dining philosophers. From left to right: 6 philosophers, 3 forks. 12 
philosophers, 6 forks. 16 philosophers, 12 forks. 10 philosophers, 9 forks. 



1. think; 

2. fork :— random_choice{left, right); 

3. if isFree{fork) then take{fork) else goto 3; 

4. if isPree{other{fork)) 

then take (other (fork)) 
else {release (fork); goto 2} 

5. eat; 

6. release (fork); release{other{fork)); 

7. goto 1; 

Table 1: The algorithm LRl. 

or more alternatives. The outcome of the random choice de- 
pends on a probabihty distribution, and it is not controlled 
by the adversary. For this reason, even under the same ad- 
versary, different computations may be possible. This model 
of computation has been formalized by Lynch and Seeala by 
introducing the concept of probabilistic automata p| , p^ . 

3. LIMITATIONS OF THE ALGORITHMS 
OF LEHMANN AND RABIN 

In this section we show that the randomized algorithms of 
Lehmann and Rabin presented in do not work anymore 
in the general case. 

We start by recalling the first algorithm of Lehmann and Ra- 
bin, LRl for short. Each philosopher runs the code written 
in Table ^. 

Following standard conventions we assume that the action 
think may not terminate, while all the other ones are sup- 
posed to terminate. The test-and-set operations on the 
forks, in Steps 3 and 4, are supposed to be executed atomi- 
cally. Each outcome (left or right) of the random draw has 
a positive probability and the sum of the probabilities is 1. 
In the classic algorithm the probability is evenly distributed 
(1/2 for left and 1/2 for right). However our negative results 
do not depend on this assumption. 

It has been shown in that, for the classic dining philoso- 
phers, LRl ensures progress with probability 1 under every 
fair scheduler. A more formal proof of this result can be 



found in §, 

In the generalized case this result does not hold anymore. 
Let us illustrate the situation with an example. We use 
the following notation: An empty arrow, associated with a 
philosopher and pointing towards a fork, denotes that the 
philosopher has committed to that fork (has selected that 
fork with the random choice instruction) but he has not 
taken it yet. A filled arrow denotes that the philosopher is 
holding the fork, namely he has taken the fork and has not 
released it yet. From now on, we will represent the nodes 
(forks) as bullets, instead than as sticks. 

For the sake of simplicity, for the moment we relax the fair- 
ness requirement. We will discuss later how to make the 
example valid also in presence of fairness. 

Consider the system on the leftmost side of Figure |l[ and 
consider State 1 depicted in the figure below. Clearly, this 
state is reachable from the initial state (where all philoso- 
phers are at the beginning of the program, i.e. thinking) 
with a non-null probability. 




State 1 State 2 State 3 




State 4 State 5 State 6 



The scheduler chooses P4 next. If P4 commits to the free 
fork, then he will take it and then try to get the other fork. 
Since the other fork is taken by P3, P4 has to release the first 
fork and draw again. The scheduler keeps selecting P4 until 
he commits to the fork taken by P3. When this commitment 
occurs we are in State 2. 



Next the scheduler selects Pi and Pi takes the fork he had 
committed to. Then the scheduler keeps scheduling P5 until 
P5 commits to the fork taken by Pi (like it was done for P4). 
This is State 3. 

Then the scheduler selects P2, and P2 takes the fork he had 
committed to. This situation is represented by State 4. 

The scheduler continues with P3. P3 finds his second fork 
taken by P2 and therefore releases the fork that he currently 
controls. Pe is then scheduled, until it commits to the fork 
taken by P2. This is State 5. 

Finally the scheduler runs P2, and P2 will have to release 
his fork, since the other fork is taken by Pi. Then P4 is 
selected, and he takes the fork he had committed to. Then 
the scheduler selects Pi, which will have to release his fork 
since the other one is taken by P4. This is State 6. 

Observe now that State 6 is isomorphic to State 1, in the 
sense that they differ only for the names of the philosophers. 
The scheduler can then go back to State 1 and then repeat 
these steps forever, thus inducing a computation in which 
no philosopher is able to eat. Note that the probability of 
a computation of this kind is 1/4, which is the probability 
of reaching a state isomorphic to State 1 already at the first 
attempt. (We are assuming that the probability of picking 
a particular adjacent fork is evenly distributed between left 
and right, i.e. it's 1/2. If this is not the case then the 
figure above will be different from 1/4, but it will still be 
positive.) It's easy to see that, by repeating the attempt to 
reach State 1 (possibly after some philosopher has eaten), 
the scheduler can eventually induce a cycle like the above 
one with probability 1. 

Unfortunately the scheduler considered in this example is 
unfair. In fact, it keeps selecting one philosopher (for in- 
stance P4) until it commits to a taken fork. If the philoso- 
pher chooses forever the free fork, then the resulting com- 
putation is unfair. Although such a computation has proba- 
bility 0, according to the definition of fairness, the scheduler 
is unfair. 

However, it is easy to modify the scheduler so to obtain a 
fair scheduler which achieves the same result, namely a no- 
progress computation with non-null probability, although 
smaller than 1 /4. Consider a variant of the above scheduler 
which keeps selecting a "stubborn philosopher" for a finite 
number of times only, but which increases this number at 
every round. By "round" here we mean the computation 
fragment which goes from State 1 to State 6, and back to 
State 1, as described above. Let nt be the maximum number 
of times which the scheduler is allowed to select the same 
philosopher during the fc-th round. Choose Uk to be big 
enough so that the probability that the scheduler actually 
succeeds to complete the fc-th round is I — p'' with p < 
1/2. Consider an infinite computation made of successive 
successful rounds. The probability of this computation is 
greater than or equal to 



inr=i(i-/). 



It is easy to prove by induction that for every m > 1, 
holds. Hence we have 

nr=i(i-/) > i-P-p'. 

Furthermore, by the assumption p < 1/2, we have 
1 - p - p^ > 1/4. 

3.1 A general limitation to the first algorithm 
of Lehmann and Rabin 

We have seen that there is at least one example of graph 
in which LRl does not work. One could hope that this ex- 
ample represents a very special situation, and that under 
some suitable conditions LRl could still work in more gen- 
eral cases than just the standard one. Unfortunately this 
is not true: It turns out that as soon as we allow one fork 
of the ring to be shared by an additional philosopher, LRl 
fails. 

In the following, we will call ring (or cycle) a graph which 
has fc nodes, say 0, 1, ... fc — 1, and fc arcs connecting the 
pairs (0,1), (1,2),... ,(fc-l,0). 

Theorem 1. Consider a graph G containing a ring sub- 
graph H , and such that one of the nodes of H has at least 
three incident arcs (i.e. an additional arc in G besides the 
two m H). Then it is possible to define a fair scheduler for 
LRl such that the probability of a computation in which the 
arcs (philosophers) in H make no progress is strictly posi- 
tive. 

Proof (Sketch) Figure ^ represents the subgraph of G con- 
sisting of 

• the ring H (a hexagon in the figure, but the number 
of vertices is not important) with a node / having (at 
least) three incident arcs, 

• the arc P in G but not in H which is incident on /, 
and 

• the node g adjacent to / via P. 

It does not matter whether g is a node in H or not. 

Figure ^ shows a possible sequence of states induced by 
a scheduler 5*. State 1 is reachable from the initial state 
(where all philosophers are thinking) with a non-null proba- 
bility. The scheduler controls the directionality of the arrows 
by means of the technique explained in the example in pre- 
vious section. The state transitions should be rather clear, 
except maybe for the last one. That transition (between 
State 5 and State 6) is achieved by the following sequence 
of actions: 

• schedule P and let him eat (this is always possible - 
the scheduler can always make g free at the moment 
P needs it) 
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State 2 
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State 5 




State 6 



Figure 2: A winning scheduling strategy against the algorithm LRl. 



schedule the philosopher adjacent to P which is com- 
mitted to /, and let him take / 

keep scheduling P until he commits to /. 



State 6 is symmetric to State 1 and we can therefore define 
an infinite computation, where no philosopher in H eats, by 
repeating the actions which bring from State 1 to State 6, 
and then back to State 1, and so on. 

Again, the scheduler S illustrated here is not fair, but we can 
obtain a fair scheduler S' which approximates S by letting 
the "level of stubbornness" of S' increase at each round, 
following the technique used in the example above. □ 



these lists, and signs up the guest books of the forks. Before 
picking up a fork, a philosopher must check that there are 
no other incoming requests for that fork, or that the other 
philosophers requesting the fork have used it after he did. 
This condition will be represented, in the algorithm, by the 
condition Co?ici(/orfc)^. 

Table ^ shows the code run by each philosopher. 

The negative result expressed in Theorem |l] does not hold 
for LR2. In fact, once P has eaten, he cannot take Fork / 
before the neighbor has eaten as well. However the class of 
graphs in which LR2 does not work is still fairly general: 



3.2 The second algorithm of Lehmann and 
Rabin 

In this section we consider the second algorithm of Lehmann 
and Rabin, presented in as a lockout-free solution to the 
classic dining philosophers. 

We consider here a slight generalization of the original algo- 
rithm suitable for the a generic topology. Hereafter we will 
refer to it as LR2. We assume that each fork is provided 
with the following data structures: 

• A list of incoming requests r, with operations isEmpty, 
insert, and remove. Initially the list is empty. 

• A "guest book" g, namely a list which keeps track of 
the philosophers who have used the fork. 

The idea is that when a philosopher gets hungry, he inserts 
his name id in the request list of the adjacent fork^. Af- 
ter the philosopher has eaten, he removes his name from 

^We do not need to assume that all philosophers have dif- 
ferent ids, but simply that those who share a fork are distin- 



Theorem 2. Consider a graph G containing a ring sub- 
graph H , and such that two of the nodes in H are connected 
at least by three different paths (i.e. an additional path P 
in G besides the two in H). Then it is possible to define a 
fair scheduler for LR2 such that the probability of a compu- 
tation in which the arcs (philosophers) of H and P make no 
progress is strictly positive. 



Proof (Sketch) The proof is illustrated in Figure which 
shows the part of G containing the ring H and the additional 
path between two nodes of H . 

Like before, the computation illustrated in the figure is in- 
duced by an unfair scheduler S, but by following the usual 

guished form each other. This assumption does not violate 
the symmetry requirement. In fact, the distinction between 
the adjacent philosophers could be stored in the fork and 
used only within the operations on the fork. 
^In the original algorithm the list of incoming request is 
replaced by two switches associated to the two adjacent 
philosophers, and instead of the guest book there is a simple 
variable which indicates which one of the adjacent philoso- 
phers has eaten last. 
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Figure 3: A winning scheduling strategy against the algorithms LRl and LR2. 



1. think; 

2. insert{id, left.r); ins ert {id, right. r); 

3. fork :— random_choice{left, right); 

4. if isFree{fork) and Cond{fork) 

then take{fork) 
else goto 4; 

5. if isFree{other{fork)) 

then take{other{fork)) 

else {release{fork); goto 3; } 

6. eat; 

7. remove{id, left.r); remove(id, right. r); 

8. insert{id, left.g); insert{id, right. g); 

9. release{fork); release{other{fork)); 

10. goto 1; 

Table 2: The algorithm LR2. 



technique we can define a fair sclieduler S' wliicli approxi- 
mates S and which achieves the same result. Note that none 
of the philosophers in H and in the additional path ever gets 
to eat, hence the modification of LR2 wrt LRl, namely the 
test Cond{fork), is useless: /orfc.p remains forever empty. □ 



4. A DEADLOCK-FREE SOLUTION 

In this section we propose a symmetric and fully distributed 
solution to the generalized dining philosophers and show 
that it makes progress with probability 1. 

Our algorithm works as follows. Each fork has associated 
a field nr which contains an integer number ranging in the 
interval [0, m], with m > k, where k is the total number of 
forks in the system. Initially nr is for all the forks. Each 
philosopher can change the nr value of a fork when he gets 
hold of it, and he tries to make sure that the nr values of its 
adjacent forks become and arc maintained different. In or- 
der to ensure that this situation will be eventually achieved, 
each new nr value is chosen randomly. Note that this ran- 
dom choice is necessary to break the symmetry, otherwise, 
in presence of a ring, a malicious scheduler could induce a 
situation where one philosopher changes one fork, then his 
neighbor changes the other fork to the same value, and so 
on, for all the forks in the ring. 



Our algorithm is similar to LRl, except that the choice of 



1 . think ; 

2. if left.nr > right. nr 

then fork := left 
else fork := right; 

3. if isFree{fork) then take{fork) else goto 3; 

4. if fork, nr — other (fork), nr 

then fork := random[l,m]; 

5. if isFree{other{fork)) 

then take {other (fork)) 
else {release (fork); goto 2} 

6. eat; 

7. release{fork); release (other (fork)); 

8. goto 1; 

Table 3: The algorithm GDPl. 

the first fork is done by picking the one with the highest 
nr value (if they are different), instead than randomly. The 
other difference is that, as explained before, the philoso- 
pher may change the nr value of a fork when it finds that 
it is equal to the nr value of the other fork. This is done 
by calling random[l, m], which returns a natural number in 
the interval [l,m], selected probabilistically. We assume for 
simplicity that the probability of the outcome is evenly dis- 
tributed among the numbers in the interval. The algorithm 
is illustrated in Table |[ We will refer to it as GDPl. 

We prove now that GDPl makes progress, under every fair 
scheduler, with probability 1. The proof is formalized in 
terms of the progress and unless statements introduced in 
^, A progress statement is denoted by S -^-^ S' , 

where S and S' are sets of states, p is a probability, and A 
is a class of adversaries. Its meaning is that starting from 
any state in S, under any adversary in A, a state in S' is 
reached with probability at least p. An unless statement is 
of the form S unless S' and means that, if the system is in 
one of the states of S, then it remains in S (possibly moving 
through different states of S) until it reaches a state in S' . 

Let us define T to be the set of states in which some philoso- 
pher tries to eat {trying section, steps 2 through 5), and E 
to be the set of states in which some philosopher is eating. 
We will show that T — ^ E, where F is the class of all fair 

adversaries. The following properties of progress statement, 
proved in Q |l^ , will be useful for our purposes. 

Lemma 1 (Concatenation). 

If S S' and S' 5"', then S ^ 5". 

PI p' pp' 



Lemma 2 (Union). 



// Si S[ and S2 S'2, then S1US2 ^ S[US'2 

PI PI p 

with p = min{pi,p2}. 



Lemma 3 (Persistence wins). 

// S S" withp > 0, and S unless S' , then S S' . 

p 1 

We are now ready to prove the correctness of GDPl. 
Theorem 3. T E. 



Proof Let us denote by Ci the set of states in which there is 
one cycle in the graph where all adjacent forks have different 
numbers. C2 is the set of states in which there are two cycles 
in the graph where all adjacent forks have different numbers, 
and so on. 

We have the following progress statements: 

• r (rnCi)US, withp > m!/m'''(m - fc)!. In fact, 

V 

one of the trying philosophers, say Pi, will find the first 
fork free and will pick it up. Then, either he will find 
also his second fork free, and therefore will eat, or it 
will find the second fork taken by another philosopher, 
say P2. Again, either P2 will eat, or will find his second 
fork taken by another philosopher, say P3, etc. Since 
the number of philosophers is finite, we will end up 
either with one philosopher eating, or with a ring of 
forks all picked up as first forks at least once. Since 
each philosopher changes the nr value of the first fork 
if this value is equal to that of the other fork, the adja- 
cent forks of this ring will get all different values with 
probability p not smaller than m\/m''{m — k)\ (this is 
the probability that, if we assign randomly values in 
the range [l,m] to the nodes of a complete graph of 
cardinality k, all the nodes get a different value). Note 
that, by the assumption m > fc, we have p > 0. 

• rnCi (r n C2) U £. Similar to previous point. 



• TnCh-i — > {TnCh)UE. Similar to previous point. 

p 

• T nCh — » E. When all possible cycles in the graph 

have adjacent nodes with different nr values, then the 
algorithm works like a hierarchical resource allocation 
algorithm based on a partial ordering: Let P be the 
first philosopher who is holding the first fork, and such 
that the nr value of the other fork / is the smallest of 
all the forks adjacent to /. Then either P or one of his 
neighbors will eat. 

From the above statements, and by using Lemma |l[ the 
obvious fact that E — ^ E, and Lemma ^, we derive 

T E. 

ph 



1. think; 

2. insert{id, left.r); insert{id, right. r); 

3. if left.nr > right. nr 

then fork :— left 
else fork :— right; 

4. if isFree{fork) then take{fork) else goto 4; 

5. if fork, nr = other {fork). nr 

then fork :— random[l , m]; 

6. if isFree{other{fork)) 

then take [other {fork)) 
else {release{fork); goto 3} 

7. eat; 

8. remove{id, left.r); remove{id, right. r); 

9. insert{id, left.g); insert{id, right. g); 

10. release{fork); release{other{fork)); 

11. goto 1; 

Table 4: The algorithm GDP2. 



On the other hand, it's clear that, since philosophers keep 
trying until they eat, we have also 

T unless E. 

Therefore, by applying Lemma ^, we conclude T — ^ E. □ 

Note that GDPl does not guarantee that we will reach, with 
probability 1, a situation where all adjacent forks will have 
a different nr. Not even if all philosophers are in the trying 
section infinitely often. This is because some philosophers 
may never succeed to pick up a fork, for instance because 
they are always scheduled when their neighbors are eating. 



5. A LOCKOUT-FREE SOLUTION 

The algorithm GDPl presented in the previous section is 
not lockout-free. In fact, consider two adjacent philosophers. 
Pi and P2, which share a fork / with a nr value which is 
smaller than the value of the other fork g of Pi. Then Pi 
will keep selecting g as first fork, and the scheduler could 
keep scheduling the attempt of Pi to pick the second fork, 
/, only when / is held by P2. 

We now propose a lockout-free variant of GDPl. The idea 
is to associate to each fork a list of incoming requests r, and 



Theorem 4. Ti 



E,. 



a "guest book" g, like it was done in Section 3.2. The test 
Cond{fork) is defined in the same way as in Section 3.2. The 
new algorithm, that we will call GDP2, is shown in Table ^. 

We show now that GDP2 is lockout-free. In the following, Ti 
will represent the set of states in which the philosopher Pi is 
trying to eat, and Ei the situation in which the philosopher 
Pi is eating. 



Proof Let us denote by Ci,r is the set of states in which 
there are r cycles containing the arc Pi, and where all ad- 
jacent forks have different numbers. Furthermore, let us 
use Wi^a to represent the set of states in which there are 
s philosophers connected to Pi which have already eaten 
and can't eat until all their adjacent philosophers (and ulti- 
mately Pi) have eaten as well. 

The proof is similar to the one of Theorem |^. The invariant 
in this case is 



T, n c, , n w. 



{T, n a,r + l n W^,s) 

u 

{T, n a,r n m,s+i) u E^ 



where p has the same lower bound as in the proof of Theorem 
^. Furthermore, if h is the total number of cycles containing 
Pi, and m is the total number of philosophers connected to 
Pi, we have 



{T,nc^Mnw^,s+l)uE,. 



and 



T^nC^.rnW^.,^ > {T D C\.r+1 Cl Wi,,^) U Ei . 

P 



TinCi,hnw^,,n — > E,. 

1 



Hence, by Lemma ^ and ^ we derive 

Ti — > Ei . 

ph + m 

Since Ti unless Ei , by Lemma ^ we conclude. □ 

6. CONCLUSION AND FUTURE WORK 

We have shown that the randomized algorithms of Lehmann 
and Rabin for the symmetric and fully distributed dining 
philosophers problem do not work anymore when we relax 
the condition that the topology is a simple ring. We have 
then proposed randomized solutions ensuring progress and 
lockout-freedom for the general case of an arbitrary connec- 
tion graph. 

In this paper we have focused on the existence of a solu- 
tion, and we have not address any efficiency issue. Clearly, 
efficiency is an important attribute for an algorithm. The 
evaluation of the complexity of our algorithms, and possi- 
bly the study of more efficient variants, are open topics for 
future research. 

Another open problem that seems worth exploring is the 
symmetric and fully distributed solution in the even more 
general case of hypergraphs-like connection structures, in 
which a philosopher may need more than two forks to eat. 

This work is part of a project which aims at providing a 
fully distributed implementation of the 7r-calculus. The al- 
gorithm presented here will serve for solving the conflicts 
associated to the competition for channels arising in pres- 
ence of guarded-choice commands. 
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